CVE-2011-2428 — Improper Input Validation in Adobe Flash Player

CWE-20 — Improper Input Validation4 documents4 sources
Severity
9.3CRITICALNVD
EPSS
2.7%
top 14.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Flash Player
Timeline
PublishedSep 22
Latest updateMay 14

Description

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service (browser crash) via unspecified vectors, related to a "logic error issue."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDadobe/flash_player10.3.183.7+95

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-8368-8fhr-8jhg: Adobe Flash Player before 10↗2022-05-14
▶

📋Vendor Advisories

1
Red Hat
flash-plugin: critical flaws fixed in APSB11-26↗2011-09-21
▶

💬Community

1
Bugzilla
CVE-2011-2426 CVE-2011-2427 CVE-2011-2428 CVE-2011-2430 acroread, flash-plugin: critical flaws fixed in APSB11-26↗2011-09-21
▶